Insights from Simulation Exercises on Strengthening Cyber Risk Governance

Cyber risk has become an important concern for top organizational leaders, as attacks grow more complex and make it harder for companies to stay secure while running their business. Research from over 1,800 simulation exercises shows that decision-making gets significantly worse as threats become more complicated, but four management strategies can help: adapting quickly to changes, learning from each incident, making cyber risk everyone's responsibility across the company, and building security capabilities before problems happen.